AppRole secrets retrieval pattern

Q: how would you distribute the private key you are talking about?

Do you see this threat Secrets for docker-compose services - #4 by Wolfsrudel ?